The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0248 for details.

This update for the Linux Kernel 4.4.74-92_32 fixes several issues.
The following security issue was fixed :

  - CVE-2018-3665: System software utilizing Lazy FP state     restore technique on systems using Intel Core-based     microprocessors may potentially have allowed a local     process to infer data from another process via a     speculative execution side channel (bsc#1090338,     bsc#1096740).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes the following issues: Security issues fixed :

  - CVE-2018-12617: Fix integer overflow that causes     segmentation fault in qmp_guest_file_read() with     g_malloc() (bsc#1098744).

  - CVE-2018-3665: Fix Lazy FP Save/Restore issue (XSA-267)     (bsc#1095242).

  - CVE-2018-11806: Fix heap buffer overflow while     reassembling fragmented datagrams (bsc#1096224).

  - CVE-2018-12891: Fix possible Denial of Service (DoS) via     certain PV MMU operations that affect the entire host     (XSA-264) (bsc#1097521).

  - CVE-2018-12893: Fix crash/Denial of Service (DoS) via     safety check (XSA-265) (bsc#1097522). Bug fixes :

  - bsc#1079730: Fix failed 'write' lock.

  - bsc#1027519: Add upstream patches from January.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for the Linux Kernel 3.12.61-52_119 fixes several issues.
The following security issue was fixed :

  - CVE-2018-3665: System software utilizing Lazy FP state     restore technique on systems using Intel Core-based     microprocessors may potentially have allowed a local     process to infer data from another process via a     speculative execution side channel (bsc#1090338,     bsc#1096740).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for the Linux Kernel 3.12.74-60_64_66 fixes several issues. The following security issue was fixed :

  - CVE-2018-3665: System software utilizing Lazy FP state     restore technique on systems using Intel Core-based     microprocessors may potentially have allowed a local     process to infer data from another process via a     speculative execution side channel (bsc#1090338,     bsc#1096740).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for the Linux Kernel 3.12.61-52_125 fixes several issues.
The following security issue was fixed :

  - CVE-2018-3665: System software utilizing Lazy FP state     restore technique on systems using Intel Core-based     microprocessors may potentially have allowed a local     process to infer data from another process via a     speculative execution side channel (bsc#1090338,     bsc#1096740).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for the Linux Kernel 3.12.61-52_101 fixes several issues.
The following security issue was fixed :

  - CVE-2018-3665: System software utilizing Lazy FP state     restore technique on systems using Intel Core-based     microprocessors may potentially have allowed a local     process to infer data from another process via a     speculative execution side channel (bsc#1090338,     bsc#1096740).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details.

ID	Name	Product	Family	Published	Updated	Severity
111992	OracleVM 3.4 : xen (OVMSA-2018-0248) (Bunker Buster) (Foreshadow) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	8/20/2018	1/9/2026	critical
111328	SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2048-1)	Nessus	SuSE Local Security Checks	7/25/2018	9/3/2024	medium
111346	SUSE SLES12 Security Update : xen (SUSE-SU-2018:2056-1)	Nessus	SuSE Local Security Checks	7/26/2018	9/2/2024	high
111444	SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2095-1)	Nessus	SuSE Local Security Checks	7/30/2018	9/2/2024	medium
111453	SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2104-1)	Nessus	SuSE Local Security Checks	7/30/2018	8/30/2024	medium
111456	SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2107-1)	Nessus	SuSE Local Security Checks	7/30/2018	8/30/2024	medium
111457	SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2108-1)	Nessus	SuSE Local Security Checks	7/30/2018	8/30/2024	medium
140019	OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	8/28/2020	1/9/2026	critical

Detections

Analytics

Plugins Search

critical

medium

high

medium

medium

medium

medium

critical